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IN THE CLAIMS: 



Please amend the claims as follows: 




1. (Currently Amended) A method for protecting a data file on a computer system, 
comprising the steps of: 

providing a grantee's encry ption key, a grantee's decryption kev. a grantor's 
encryption key, and a grantor's decryption key; 



using asymmetric encr yption, encrypting the data file using a the grantor's encryption 
private key to create an encrypted data file; 



generating a transformation key from the eld grantor's decryption ^ key A and the aew 
grantee's encryption key and other data which is data file independent: 

updating transforming the encrypted data file with the transformation key to create 
generate a n updated a transformed encrypted data file wherein the transforming of the 
encrypted data file does not reveal the data file during the process of transforming : 

r e placing the encrypted data file with tho updated providing the transformed 
encrypted data file to the grantee : and 

replacing tho private key with tho now kev decrypting the transformed encrypted file 
bv the gran tee with the grantee's decryption kev: 

wherein the updating of tho encrypted data file with tho transformation key does not 
r e veal the data file during the file during tho proc e oa of updating allow the grantee to 
determine the grantor's decryption kev . 

2. (Currently Amended) The method of claim 1 ( further comprising the step of repeating 
the updatin g generating step, and transforming step and the two roplaoing steps providing 
step on a periodic basis, 

3. (Cancelled) 

4. (Currently Amended) A processor-driven system adapted to protect a data file, the 
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system comprising: 

a processor; and 

a memory coupled to the processor for storing the data file; 
wherein the processor is programmed to perform the steps of: 

providing a grantee's encryption kev. a grantee's decryp tion kev. a grantor's 
encryption key, and a grantor's d ecryption key: 

using asymmetric encryption, encrypting the data file using « the grantor's 
encryption private key to create an encrypted data file; 

generating a eew key; 

\ generating a transformation key from the eM grantor's decryption key A and the 

ftew grantee's encryption kev and other data which is data file independent: 

updating transforming t he encrypted data file with the transformation key to 
ereate generate an updated a transformed encrypted data file wherein the transforming 
does not reveal the data file during the process of transformin g; 

replacing the encrypted data file with the updated providing the transformed 
encrypted data file to the grantee: and 

roplaoing tho private key with the now key decrypting the transformed 
encrypted file by the grantee with the grantee's decryption kev; 

wherein the updating of the encrypted data file with tho transformation key 
does not rev e al the data file during - tho prooooa of updating allow the grantee to 
determine the grantor's decryption key , 

5. (Original) The processor-driven system of claim 4, further comprising a 
communication interface. 

6. (Original) The processor-driven system of claim 4, wherein the processor and the 
memory are included within a portable device. 

7. (Original) The processor-driven system of claim 4, wherein the processor and the 
memory are included within a smart card. 
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8. (Newly Presented) The method of claim 1, wherein said generating step comprises 
generating the transformation key from the grantor's decryption key, the grantee's encryption 
key, and the ciphertext of the encrypted data file. 

9. (Newly Presented) The method of claim 1 wherein said generating step comprises 
generating the transformation key from the grantor's decryption key, the grantee's encryption 
key, and a random variable. 

10. (Newly Presented) The method of claim 1 wherein said generating step comprises 
generating the transformation key from the grantor's decryption key, the grantee's encryption 
key, the ciphertext of the encrypted data file, and a random variable. 

11. (Newly Presented) The processor driven system of claim 4, wherein said generating 
step comprises generating the transformation key from the grantor's decryption key, the 
grantee^ encryption key, and the ciphertext of the encrypted data file. 

12. (Newly Presented) The processor driven system of claim 4 3 wherein said generating 
step comprises generating the transformation key from the grantor's decryption key, the 
grantee's encryption key, and a random variable. 

13. (Newly Presented) The processor driven system of claim 4, wherein said generating 
step comprises generating the transformation key from the grantor's decryption key, the 
grantee's encryption key, the ciphertext of the encrypted data file, and a random variable. 
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